ABSTRACT

The 1998 Data Protection Act provides a framework for the way in which organisations should collect and process personal information. It has far-reaching implications for library and information managers who hold personal data on computer or on paper, or who may be called on to advise their colleagues. This practical guide explains the legal requirements and illustrates the issues with dozens of relevant and informative case-studies.

chapter |4 pages

Introduction

chapter 1|3 pages

Personal data

part 2|2 pages

The eight Data Protection Principles

chapter 3|5 pages

Who is responsible for data protection?

The Data Controller

chapter 4|7 pages

Informing the data subject

chapter 5|7 pages

When do you need consent?

chapter 6|4 pages

Processing ‘sensitive’ personal data

chapter 7|3 pages

Processing only for specific Purposes

chapter 8|3 pages

Monitoring employees and the public

chapter 9|4 pages

The requirement to have good quality data

chapter 10|4 pages

Archive and destruction policies

chapter 11|9 pages

People’s right to see their own records

chapter 12|7 pages

Restrictions on direct marketing

chapter 13|3 pages

Other Data Subject rights

chapter 14|7 pages

Security

chapter 15|4 pages

Who can see what?

chapter 17|5 pages

Exemptions and other special cases

chapter 18|5 pages

Notification

part 19|2 pages

Codes of practice

chapter 20|5 pages

Enforcement and penalties

part 21|2 pages

The Data Protection Compliance Officer

chapter 22|3 pages

References and further reading

part 23|2 pages

Contacts

chapter 24|14 pages

Appendices

[Reproduced from the Data Protection Act 1998 (Ch. 29). Crown Copyright 1998] Appendix 1: The Data Protection Principles